@relayflows/sdk 2.0.44 → 2.0.46

package/dist/flow-tool-http.js

@@ -0,0 +1,175 @@
+import { canonicalize } from './canonical.js';
+import { cloudConnection } from './cloud-http.js';
+import { FlowToolError } from './flow-tool-contract.js';
+import { flowToolOperationKey } from './flow-tool-client.js';
+import { FLOW_TOOL_ENVELOPE_LIMITS } from './flow-tool-wire.js';
+function pathIsSafe(path) {
+    return /^\/api\/v1\/flow-tools(?:\/[A-Za-z_][A-Za-z0-9_-]{0,63}\/invoke)?$/.test(path)
+        || /^\/api\/v1\/flow-runs\/[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}(?:\/(?:events|evidence|cancel|resume)|\/human\/[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}\/answer)?$/.test(path);
+}
+async function* chunks(response, maximumBytes) {
+    if (!response.body)
+        throw new FlowToolError('invalid_contract');
+    const reader = response.body.getReader(), decoder = new TextDecoder('utf-8', { fatal: true });
+    let size = 0;
+    try {
+        while (true) {
+            const chunk = await reader.read();
+            if (chunk.done)
+                break;
+            size += chunk.value.byteLength;
+            if (size > maximumBytes)
+                throw new FlowToolError('invalid_contract');
+            yield decoder.decode(chunk.value, { stream: true });
+        }
+        yield decoder.decode();
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+        reader.releaseLock();
+    }
+}
+function refuse(status) {
+    const code = status === 400 || status === 422 ? 'invalid_contract' : status === 401 || status === 403 ? 'not_authorized' : status === 404 ? 'not_found'
+        : status === 409 ? 'idempotency_conflict' : status === 501 ? 'unsupported' : 'unavailable';
+    throw new FlowToolError(code);
+}
+function safeError(error) {
+    if (error instanceof FlowToolError)
+        throw error;
+    throw new FlowToolError('transport_error');
+}
+/** No automatic retry; the owner can repeat the same operation key after an ambiguous failure. */
+export function createFlowToolHttpTransport(options) {
+    // Reuse existing HTTPS/token validation, but never fall back to its ambient login store.
+    if (typeof options.apiUrl !== 'string' || typeof options.token !== 'string')
+        throw new FlowToolError('invalid_contract');
+    let connection;
+    try {
+        connection = cloudConnection({ apiUrl: options.apiUrl, token: options.token });
+    }
+    catch {
+        throw new FlowToolError('not_authorized');
+    }
+    const timeout = options.requestTimeoutMs ?? 30_000;
+    if (!Number.isSafeInteger(timeout) || timeout < 1 || timeout > 120_000)
+        throw new FlowToolError('invalid_contract');
+    const fetcher = options.fetch ?? globalThis.fetch;
+    async function response(path, init, accept) {
+        if (!pathIsSafe(path))
+            throw new FlowToolError('invalid_contract');
+        const signal = AbortSignal.any([AbortSignal.timeout(timeout), ...(options.signal ? [options.signal] : [])]);
+        const result = await fetcher(`${connection.baseUrl}${path}`, {
+            ...init, redirect: 'error', signal,
+            headers: { ...init.headers, Authorization: `Bearer ${connection.token}`, Accept: accept },
+        });
+        if (!result.ok) {
+            await result.body?.cancel();
+            refuse(result.status);
+        }
+        if (result.headers.get('content-type')?.toLowerCase().split(';')[0]?.trim() !== accept) {
+            await result.body?.cancel();
+            throw new FlowToolError('invalid_contract');
+        }
+        return result;
+    }
+    return {
+        async request(request) {
+            try {
+                if (request.idempotencyKey !== undefined)
+                    flowToolOperationKey(request.idempotencyKey);
+                if (request.method === 'POST' && request.idempotencyKey === undefined)
+                    throw new FlowToolError('invalid_contract');
+                const result = await response(request.path, {
+                    method: request.method,
+                    headers: { ...(request.idempotencyKey === undefined ? {} : { 'Idempotency-Key': request.idempotencyKey }), 'Content-Type': 'application/json' },
+                    ...(request.body === undefined ? {} : { body: canonicalize(request.body) }),
+                }, 'application/json');
+                let body = '';
+                for await (const chunk of chunks(result, FLOW_TOOL_ENVELOPE_LIMITS.maxBytes))
+                    body += chunk;
+                try {
+                    return JSON.parse(body);
+                }
+                catch {
+                    throw new FlowToolError('invalid_contract');
+                }
+            }
+            catch (error) {
+                return safeError(error);
+            }
+        },
+        async *events(path, after) {
+            try {
+                if (!path.endsWith('/events') || !Number.isSafeInteger(after) || after < 0)
+                    throw new FlowToolError('invalid_contract');
+                const result = await response(path, { method: 'GET', headers: { 'Last-Event-ID': String(after) } }, 'text/event-stream');
+                let buffer = '', frame = [], frameSize = 0;
+                // Each bounded subscription may reconnect with its last validated cursor.
+                for await (const chunk of chunks(result, 4 * 1024 * 1024)) {
+                    buffer += chunk;
+                    let newline;
+                    while ((newline = buffer.indexOf('\n')) >= 0) {
+                        const line = buffer.slice(0, newline).replace(/\r$/, '');
+                        buffer = buffer.slice(newline + 1);
+                        frameSize += line.length;
+                        if (frameSize > 65536)
+                            throw new FlowToolError('invalid_contract');
+                        if (line === '') {
+                            const event = parseFrame(frame);
+                            frame = [];
+                            frameSize = 0;
+                            if (event !== undefined)
+                                yield event;
+                        }
+                        else
+                            frame.push(line);
+                    }
+                    if (buffer.length > 65536)
+                        throw new FlowToolError('invalid_contract');
+                }
+                if (buffer.length || frame.some(line => !line.startsWith(':')))
+                    throw new FlowToolError('invalid_contract');
+            }
+            catch (error) {
+                safeError(error);
+            }
+        },
+    };
+}
+function parseFrame(lines) {
+    const data = [];
+    let id, name;
+    for (const line of lines) {
+        if (line.startsWith(':'))
+            continue;
+        const separator = line.indexOf(':');
+        const field = separator < 0 ? line : line.slice(0, separator);
+        const value = separator < 0 ? '' : line.slice(separator + 1).replace(/^ /, '');
+        if (field === 'data')
+            data.push(value);
+        else if (field === 'id' && id === undefined)
+            id = value;
+        else if (field === 'event' && name === undefined)
+            name = value;
+        else
+            throw new FlowToolError('invalid_contract');
+    }
+    if (data.length === 0 && id === undefined && name === undefined)
+        return undefined;
+    if (id === undefined || !/^[1-9][0-9]*$/.test(id) || !Number.isSafeInteger(Number(id)))
+        throw new FlowToolError('invalid_contract');
+    let parsed;
+    try {
+        parsed = JSON.parse(data.join('\n'));
+    }
+    catch {
+        throw new FlowToolError('invalid_contract');
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)
+        || parsed.sequence !== Number(id)
+        || parsed.type !== name)
+        throw new FlowToolError('invalid_contract');
+    return parsed;
+}
+//# sourceMappingURL=flow-tool-http.js.map

package/dist/flow-tool-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-tool-http.js","sourceRoot":"","sources":["../src/flow-tool-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAgD,MAAM,uBAAuB,CAAC;AAC3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAahE,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC;WACjF,sJAAsJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzK,CAAC;AACD,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,QAAkB,EAAE,YAAoB;IAC7D,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM;YACtB,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,IAAI,GAAG,YAAY;gBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACrE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAAC,CAAC;AAC5E,CAAC;AACD,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW;QACrJ,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;IAC7F,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,aAAa;QAAE,MAAM,KAAK,CAAC;IAChD,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAC7C,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,2BAA2B,CAAC,OAA4B;IACtE,yFAAyF;IACzF,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACzH,IAAI,UAA8C,CAAC;IACnD,IAAI,CAAC;QAAC,UAAU,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACvF,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACpH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAiB,EAAE,MAAc;QACrE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,UAAU,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC3D,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM;YAClC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SAC1F,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACvE,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YACvF,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAwB;YACpC,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;oBAAE,oBAAoB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACvF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;oBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;gBACnH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;oBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/I,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;iBAC5E,EAAE,kBAAkB,CAAC,CAAC;gBACvB,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC;oBAAE,IAAI,IAAI,KAAK,CAAC;gBAC5F,IAAI,CAAC;oBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;gBAAC,CAAC;YACzF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAY,EAAE,KAAa;YACvC,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;oBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;gBACxH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;gBACzH,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,GAAa,EAAE,EAAE,SAAS,GAAG,CAAC,CAAC;gBACrD,0EAA0E;gBAC1E,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC;oBAChB,IAAI,OAAe,CAAC;oBACpB,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACzD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;wBACnC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC;wBACzB,IAAI,SAAS,GAAG,KAAK;4BAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;wBACnE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;4BAChB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;4BAChC,KAAK,GAAG,EAAE,CAAC;4BAAC,SAAS,GAAG,CAAC,CAAC;4BAC1B,IAAI,KAAK,KAAK,SAAS;gCAAE,MAAM,KAAK,CAAC;wBACvC,CAAC;;4BAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;oBACD,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK;wBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;gBACzE,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAC9G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAe;IACjC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,EAAsB,EAAE,IAAwB,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aAClC,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,GAAG,KAAK,CAAC;aACnD,IAAI,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,GAAG,KAAK,CAAC;;YAC1D,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClF,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACpI,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAAC,CAAC;IACpG,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;WACpE,MAAkC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;WAC1D,MAAkC,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/flow-tool-kernel.d.ts

@@ -0,0 +1,27 @@
+import { type FlowToolCatalogEntryV1 } from './flow-tool-contract.js';
+import type { FlowToolTransport } from './flow-tool-client.js';
+import { JournalClient } from './journal-client.js';
+/** The only executable accepted by the v1 embedded runtime. It receives JSON as argv data. */
+export declare const FLOW_TOOL_INPUT_PLACEHOLDER = "__RELAYFLOWS_FLOW_TOOL_INPUT_V1__";
+export interface KernelFlowToolDeployment {
+    readonly entry: FlowToolCatalogEntryV1;
+    /** A bundle whose content digest is entry.manifest.flow.digest. */
+    readonly bundlePath: string;
+    /** Operator-owned outcome label, never selected by invocation input. */
+    readonly businessVerdict: string;
+}
+export interface KernelFlowToolControlPlaneOptions {
+    readonly journal: JournalClient;
+    /** Authenticated server-side identity. This value is hashed before journaling. */
+    readonly principal: string;
+    readonly deployments: readonly KernelFlowToolDeployment[];
+    /** Server-side grants for this principal. Omission grants nothing. */
+    readonly authorizedDeploymentIds?: readonly string[];
+}
+/**
+ * Build an authenticated embedded control plane over relayflowd's durable journal.
+ * This intentionally supports only the effect-free JSON echo/conformance program;
+ * arbitrary declarative, authored, LLM, and agent flows remain unsupported.
+ */
+export declare function createKernelFlowToolControlPlane(options: KernelFlowToolControlPlaneOptions): Promise<FlowToolTransport>;
+//# sourceMappingURL=flow-tool-kernel.d.ts.map

package/dist/flow-tool-kernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-tool-kernel.d.ts","sourceRoot":"","sources":["../src/flow-tool-kernel.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,KAAK,sBAAsB,EACuB,MAAM,yBAAyB,CAAC;AAC1G,OAAO,KAAK,EAAmB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAwB,MAAM,qBAAqB,CAAC;AAM1E,8FAA8F;AAC9F,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAI/E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC1D,sEAAsE;IACtE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtD;AAkJD;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,iBAAiB,CAAC,CAmI5B"}

package/dist/flow-tool-kernel.js

@@ -0,0 +1,310 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { canonicalize } from './canonical.js';
+import { sha256, verifyBundle } from './bundle.js';
+import { FlowToolError } from './flow-tool-contract.js';
+import { flowToolOperationKey } from './flow-tool-client.js';
+import { JournalProtocolError } from './journal-client.js';
+import { parseFlowToolEntry, parseFlowToolInvocation, flowToolRunLinks, toolId } from './flow-tool-wire.js';
+import { validateFlowToolResult } from './flow-tool-manifest.js';
+/** The only executable accepted by the v1 embedded runtime. It receives JSON as argv data. */
+export const FLOW_TOOL_INPUT_PLACEHOLDER = '__RELAYFLOWS_FLOW_TOOL_INPUT_V1__';
+const RESULT_STEP = 'flow-tool-result';
+const MAX_RESULT_BYTES = 60 * 1024; // below relayflowd's 64 KiB stdout tail
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function runtimeFailure(code = 'unsupported') {
+    throw new FlowToolError(code);
+}
+function exactKeys(value, allowed) {
+    return Object.keys(value).every(key => allowed.includes(key));
+}
+function preflightTemplate(value, entry) {
+    if (!record(value) || !exactKeys(value, ['version', 'name', 'description', 'steps'])
+        || typeof value['version'] !== 'string' || value['name'] !== entry.manifest.flow.name
+        || !Array.isArray(value['steps']) || value['steps'].length !== 1)
+        runtimeFailure();
+    const step = value['steps'][0];
+    if (!record(step) || !exactKeys(step, [
+        'id', 'type', 'command', 'depends_on', 'max_iterations', 'retry', 'verification', 'timeout_ms',
+    ]) || step['id'] !== RESULT_STEP || step['type'] !== 'deterministic'
+        || !Array.isArray(step['command']) || step['command'].length !== 3
+        || !['/usr/bin/printf', '/bin/printf'].includes(step['command'][0])
+        || step['command'][1] !== '%s' || step['command'][2] !== FLOW_TOOL_INPUT_PLACEHOLDER
+        || !Array.isArray(step['depends_on']) || step['depends_on'].length !== 0
+        || step['max_iterations'] !== 1 || !record(step['retry']) || !record(step['verification'])
+        || Object.keys(step['verification']).length !== 0
+        || !Number.isSafeInteger(step['timeout_ms']) || step['timeout_ms'] < 1
+        || step['timeout_ms'] > entry.budget.max_wallclock_ms)
+        runtimeFailure();
+    const retry = step['retry'];
+    if (!exactKeys(retry, ['initial_backoff_ms', 'max_backoff_ms', 'multiplier', 'jitter_percent'])
+        || retry['initial_backoff_ms'] !== 0 || retry['max_backoff_ms'] !== 0
+        || retry['multiplier'] !== 1 || retry['jitter_percent'] !== 0)
+        runtimeFailure();
+    return value;
+}
+async function loadDeployment(deployment) {
+    let entry;
+    try {
+        entry = parseFlowToolEntry(deployment.entry);
+    }
+    catch {
+        runtimeFailure('invalid_contract');
+    }
+    if (entry.effects.length !== 0 || entry.requires_human.length !== 0
+        || !entry.business_verdicts.includes(deployment.businessVerdict))
+        runtimeFailure();
+    // This runtime prints the invocation input and nothing else. A result schema
+    // that is not that same document would journal success and then have to
+    // invent a different public reason. Refuse the deployment instead.
+    if (canonicalize(entry.manifest.inputSchema) !== canonicalize(entry.manifest.resultSchema)) {
+        runtimeFailure('unsupported');
+    }
+    const expected = entry.manifest.flow.digest.slice('sha256:'.length);
+    try {
+        const before = await readFile(join(deployment.bundlePath, 'spec.canonical.json'));
+        const preflightBefore = await readFile(join(deployment.bundlePath, 'preflight.json'));
+        await verifyBundle(deployment.bundlePath, expected);
+        const after = await readFile(join(deployment.bundlePath, 'spec.canonical.json'));
+        const preflightAfter = await readFile(join(deployment.bundlePath, 'preflight.json'));
+        if (!before.equals(after) || !preflightBefore.equals(preflightAfter))
+            runtimeFailure();
+        const report = JSON.parse(preflightAfter.toString('utf8'));
+        if (!record(report) || report['ok'] !== true)
+            runtimeFailure();
+        return { entry, template: preflightTemplate(JSON.parse(after.toString('utf8')), entry),
+            businessVerdict: deployment.businessVerdict };
+    }
+    catch (error) {
+        if (error instanceof FlowToolError)
+            throw error;
+        runtimeFailure();
+    }
+}
+function bindingDescription(binding) { return canonicalize(binding); }
+function parseBinding(entries) {
+    const spawned = entries.find(entry => entry.entry_type === 'run.spawned');
+    const spec = spawned?.payload['spec'];
+    const description = record(spec) ? spec['description'] : undefined;
+    try {
+        const value = JSON.parse(typeof description === 'string' ? description : 'null');
+        if (!record(value) || value['kind'] !== 'relayflows.flow-tool-run.v1'
+            || typeof value['deployment_id'] !== 'string' || typeof value['manifest_digest'] !== 'string'
+            || typeof value['flow_digest'] !== 'string' || typeof value['input_digest'] !== 'string'
+            || typeof value['principal_digest'] !== 'string'
+            || !/^sha256:[a-f0-9]{64}$/.test(value['manifest_digest'])
+            || !/^sha256:[a-f0-9]{64}$/.test(value['flow_digest'])
+            || !/^sha256:[a-f0-9]{64}$/.test(value['input_digest'])
+            || !/^[a-f0-9]{64}$/.test(value['principal_digest']))
+            runtimeFailure('invalid_contract');
+        return value;
+    }
+    catch (error) {
+        if (error instanceof FlowToolError)
+            throw error;
+        runtimeFailure('invalid_contract');
+    }
+}
+function journalEntries(value) {
+    if (!value.every(item => record(item) && Number.isSafeInteger(item['seq'])
+        && typeof item['entry_type'] === 'string' && record(item['payload'])))
+        runtimeFailure('invalid_contract');
+    return value;
+}
+function terminalReason(reason) {
+    if (reason === 'success')
+        return 'success';
+    if (reason === 'canceled')
+        return 'canceled';
+    if (reason === 'budget_exceeded')
+        return 'budget_exceeded';
+    return 'execution_failed';
+}
+function runState(status, reason) {
+    if (reason === 'success')
+        return 'completed';
+    if (reason === 'canceled')
+        return 'cancelled';
+    if (reason !== null)
+        return 'failed';
+    if (status === 'parked')
+        return 'parked';
+    return 'running';
+}
+function mapProtocolError(error, admission = false) {
+    if (error instanceof JournalProtocolError) {
+        if (error.code === 'run_admission_conflict')
+            throw new FlowToolError('idempotency_conflict');
+        if (error.code === 'run_not_found')
+            throw new FlowToolError('not_authorized');
+        throw new FlowToolError('unavailable');
+    }
+    throw new FlowToolError(admission ? 'transport_error' : 'unavailable');
+}
+/**
+ * Build an authenticated embedded control plane over relayflowd's durable journal.
+ * This intentionally supports only the effect-free JSON echo/conformance program;
+ * arbitrary declarative, authored, LLM, and agent flows remain unsupported.
+ */
+export async function createKernelFlowToolControlPlane(options) {
+    if (typeof options.principal !== 'string' || options.principal.length < 1 || options.principal.length > 1024) {
+        runtimeFailure('invalid_contract');
+    }
+    const principalDigest = sha256(options.principal);
+    const grants = new Set(options.authorizedDeploymentIds ?? []);
+    const deployments = new Map();
+    const names = new Map();
+    for (const candidate of options.deployments) {
+        const loaded = await loadDeployment(candidate);
+        if (deployments.has(loaded.entry.deployment_id) || names.has(loaded.entry.manifest.name))
+            runtimeFailure('invalid_contract');
+        deployments.set(loaded.entry.deployment_id, loaded);
+        names.set(loaded.entry.manifest.name, loaded);
+    }
+    const authorized = (deployment) => grants.has(deployment.entry.deployment_id);
+    async function readAuthorizedRun(runId) {
+        toolId(runId);
+        let entries;
+        try {
+            entries = journalEntries((await options.journal.journalRead(runId, 1, 1000)).entries);
+        }
+        catch (error) {
+            mapProtocolError(error);
+        }
+        const binding = parseBinding(entries);
+        const deployment = deployments.get(binding.deployment_id);
+        if (deployment === undefined || !authorized(deployment) || binding.principal_digest !== principalDigest
+            || binding.manifest_digest !== deployment.entry.manifest.digest
+            || binding.flow_digest !== deployment.entry.manifest.flow.digest)
+            throw new FlowToolError('not_authorized');
+        return { deployment, binding, entries: entries };
+    }
+    async function projectRun(runId) {
+        const { deployment, binding, entries } = await readAuthorizedRun(runId);
+        let snapshot;
+        try {
+            snapshot = await options.journal.runGet(runId);
+        }
+        catch (error) {
+            mapProtocolError(error);
+        }
+        const completed = entries.find(entry => entry.entry_type === 'step.completed' && entry.step_id === RESULT_STEP);
+        const ended = entries.find(entry => entry.entry_type === 'run.completed');
+        let reason = ended === undefined ? null : terminalReason(ended.payload['completionReason']);
+        if (reason === null && ['failed', 'interrupted'].includes(snapshot.status))
+            reason = 'execution_failed';
+        let result = null;
+        if (reason === 'success') {
+            // The journal already recorded success. Do not publish a different
+            // terminal reason from a projection-time check the journal never stored.
+            const output = completed?.payload['output'];
+            if (!record(output) || typeof output['stdout_tail'] !== 'string')
+                throw new FlowToolError('unavailable');
+            try {
+                result = validateFlowToolResult(deployment.entry.manifest, JSON.parse(output['stdout_tail']));
+            }
+            catch {
+                throw new FlowToolError('unavailable');
+            }
+        }
+        const state = runState(snapshot.status, reason);
+        const sequence = Math.max(0, ...entries.map(entry => entry.seq));
+        const evidence = { journal_digest: `sha256:${sha256(canonicalize(entries))}`,
+            flow_digest: deployment.entry.manifest.flow.digest, artifacts: [], redacted_transcript_refs: [] };
+        const terminal = reason === null ? null : {
+            terminal_reason: reason,
+            business_verdict: reason === 'success' ? deployment.businessVerdict : null,
+            result: reason === 'success' ? result : null,
+            gates: [], evidence,
+            spend: { tokens_in: snapshot.budget.tokens_in, tokens_out: snapshot.budget.tokens_out,
+                dollars: snapshot.budget.dollars, dollars_unmetered: snapshot.budget.dollars_unmetered === true },
+        };
+        return { api_version: 1, accepted: true, run_id: runId, tool_name: deployment.entry.manifest.name,
+            deployment_id: deployment.entry.deployment_id, manifest_digest: deployment.entry.manifest.digest,
+            flow_digest: deployment.entry.manifest.flow.digest, input_digest: binding.input_digest,
+            state, sequence, ...flowToolRunLinks(runId), terminal };
+    }
+    function eventsFor(run, entries, after) {
+        const projected = [];
+        for (const entry of entries) {
+            if (entry.seq <= after)
+                continue;
+            if (entry.entry_type === 'run.spawned')
+                projected.push({ api_version: 1, run_id: run.run_id,
+                    flow_digest: run.flow_digest, sequence: entry.seq, type: 'run.accepted', state: 'accepted' });
+            else if (entry.entry_type === 'step.completed')
+                projected.push({ api_version: 1, run_id: run.run_id,
+                    flow_digest: run.flow_digest, sequence: entry.seq, type: 'step.completed', state: 'running',
+                    ...(entry.step_id === null || entry.step_id === undefined ? {} : { step_id: entry.step_id }) });
+            else if (entry.entry_type === 'run.completed')
+                projected.push({ api_version: 1, run_id: run.run_id,
+                    flow_digest: run.flow_digest, sequence: entry.seq, type: 'run.terminal', state: run.state,
+                    terminal_reason: run.terminal.terminal_reason });
+        }
+        return projected;
+    }
+    return {
+        async request(request) {
+            if (request.method === 'GET' && request.path === '/api/v1/flow-tools') {
+                return { api_version: 1, tools: [...deployments.values()].filter(authorized).map(value => value.entry) };
+            }
+            const invoke = request.path.match(/^\/api\/v1\/flow-tools\/([^/]+)\/invoke$/);
+            if (request.method === 'POST' && invoke !== null) {
+                const deployment = names.get(invoke[1]);
+                if (deployment === undefined || !authorized(deployment))
+                    throw new FlowToolError('not_authorized');
+                flowToolOperationKey(request.idempotencyKey);
+                const body = parseFlowToolInvocation(request.body, deployment.entry);
+                const encoded = canonicalize(body.input);
+                if (Buffer.byteLength(encoded) > MAX_RESULT_BYTES)
+                    throw new FlowToolError('unsupported');
+                // Catalog bytes and the operator verdict label are not part of the
+                // admitted program. Putting them in the spec description changes the
+                // kernel spec hash, so a budget or verdict reload conflicts with the
+                // same operation key and the original run can no longer be read.
+                const binding = { kind: 'relayflows.flow-tool-run.v1', deployment_id: deployment.entry.deployment_id,
+                    manifest_digest: deployment.entry.manifest.digest, flow_digest: deployment.entry.manifest.flow.digest,
+                    input_digest: body.input_digest, principal_digest: principalDigest };
+                const step = deployment.template.steps[0];
+                const spec = { ...deployment.template, description: bindingDescription(binding), steps: [{
+                            ...step, command: [step.command[0], '%s', encoded],
+                        }] };
+                const admissionKey = `flow-tool:${sha256(canonicalize([principalDigest, deployment.entry.deployment_id,
+                    deployment.entry.manifest.flow.digest, deployment.entry.manifest.digest, request.idempotencyKey]))}`;
+                let started;
+                try {
+                    started = await options.journal.runStart(spec, undefined, admissionKey);
+                }
+                catch (error) {
+                    mapProtocolError(error, true);
+                }
+                return projectRun(started.run_id);
+            }
+            const runPath = request.path.match(/^\/api\/v1\/flow-runs\/([^/]+)(.*)$/);
+            if (runPath === null)
+                throw new FlowToolError('not_found');
+            const run = await projectRun(runPath[1]);
+            if (request.method === 'GET' && runPath[2] === '')
+                return run;
+            if (request.method === 'GET' && runPath[2] === '/evidence') {
+                if (run.terminal === null)
+                    throw new FlowToolError('unavailable');
+                return { api_version: 1, run_id: run.run_id, evidence: run.terminal.evidence };
+            }
+            // The conformance program cannot park, so commands are deliberately absent.
+            throw new FlowToolError('unsupported');
+        },
+        async *events(path, after) {
+            const match = path.match(/^\/api\/v1\/flow-runs\/([^/]+)\/events$/);
+            if (match === null || !Number.isSafeInteger(after) || after < 0)
+                throw new FlowToolError('invalid_contract');
+            const { entries } = await readAuthorizedRun(match[1]);
+            const run = await projectRun(match[1]);
+            for (const event of eventsFor(run, entries, after))
+                yield event;
+        },
+    };
+}
+//# sourceMappingURL=flow-tool-kernel.js.map

package/dist/flow-tool-kernel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-tool-kernel.js","sourceRoot":"","sources":["../src/flow-tool-kernel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,aAAa,EACoD,MAAM,yBAAyB,CAAC;AAE1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAiB,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5G,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAIjE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAC/E,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,wCAAwC;AA8C5E,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,OAA2C,aAAa;IAC9E,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,OAA0B;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAA6B;IACtE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;WAC/E,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI;WAClF,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;QACpC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY;KAC/F,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe;WAC/D,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;WAC/D,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAW,CAAC;WAC1E,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,2BAA2B;WACjF,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;WACrE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;WACvF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;WAC9C,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAK,IAAI,CAAC,YAAY,CAAY,GAAG,CAAC;WAC9E,IAAI,CAAC,YAAY,CAAY,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB;QAAE,cAAc,EAAE,CAAC;IACtF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;WAC1F,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC;WAClE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;IAClF,OAAO,KAAiC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,UAAoC;IAChE,IAAI,KAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAAC,CAAC;IACnG,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;WAC9D,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,cAAc,EAAE,CAAC;IACrF,6EAA6E;IAC7E,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3F,cAAc,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtF,MAAM,YAAY,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC;YAAE,cAAc,EAAE,CAAC;QACvF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,cAAc,EAAE,CAAC;QAC/D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC;YACpF,eAAe,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,cAAc,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,IAAY,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE1F,SAAS,YAAY,CAAC,OAAgC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,aAAa,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,6BAA6B;eAChE,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,QAAQ;eAC1F,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,QAAQ;eACrF,OAAO,KAAK,CAAC,kBAAkB,CAAC,KAAK,QAAQ;eAC7C,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;eACvD,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;eACnD,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;eACpD,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC3F,OAAO,KAA8B,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WACrE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC5G,OAAO,KAAkC,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAC3D,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAqC;IACrE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,SAAS,GAAG,KAAK;IACzD,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;YAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;QAC7F,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC9E,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAA0C;IAE1C,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC7G,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC7H,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,UAA4B,EAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAEzG,KAAK,UAAU,iBAAiB,CAAC,KAAa;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC;QACd,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,cAAc,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAC9F,OAAO,KAAK,EAAE,CAAC;YAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAQ,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,gBAAgB,KAAK,eAAe;eAClG,OAAO,CAAC,eAAe,KAAK,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;eAC5D,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC9G,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAQ,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,KAAa;QACrC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,QAAsD,CAAC;QAC3D,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAClG,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,gBAAgB,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;QAChH,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC;QAC1E,IAAI,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5F,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAS,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,kBAAkB,CAAC;QACzG,IAAI,MAAM,GAAkD,IAAI,CAAC;QACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,mEAAmE;YACnE,yEAAyE;YACzE,MAAM,MAAM,GAAG,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;YACzG,IAAI,CAAC;gBAAC,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACtG,MAAM,CAAC;gBAAC,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,EAAE,cAAc,EAAE,UAAU,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAW;YACnF,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,wBAAwB,EAAE,EAAE,EAAE,CAAC;QACpG,MAAM,QAAQ,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,eAAe,EAAE,MAAM;YACvB,gBAAgB,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;YAC1E,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC5C,KAAK,EAAE,EAAE,EAAE,QAAQ;YACnB,KAAK,EAAE,EAAE,SAAS,EAAE,QAAS,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,QAAS,CAAC,MAAM,CAAC,UAAU;gBACrF,OAAO,EAAE,QAAS,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAS,CAAC,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE;SACtG,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC/F,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM;YAChG,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAkC;YAC5G,KAAK,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC5D,CAAC;IAED,SAAS,SAAS,CAAC,GAAkB,EAAE,OAAgC,EAAE,KAAa;QACpF,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK;gBAAE,SAAS;YACjC,IAAI,KAAK,CAAC,UAAU,KAAK,aAAa;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;oBACzF,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;iBAC3F,IAAI,KAAK,CAAC,UAAU,KAAK,gBAAgB;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;oBACjG,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS;oBAC3F,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;iBAC7F,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;oBAChG,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;oBACzF,eAAe,EAAE,GAAG,CAAC,QAAS,CAAC,eAAe,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAwB;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACtE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3G,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACjD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;gBACzC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;oBAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBACnG,oBAAoB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;gBACrE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,gBAAgB;oBAAE,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;gBAC1F,mEAAmE;gBACnE,qEAAqE;gBACrE,qEAAqE;gBACrE,iEAAiE;gBACjE,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa;oBAC9G,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM;oBACrG,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;gBACvE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAA+B,CAAC;gBACxE,MAAM,IAAI,GAAkB,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;4BACtG,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,OAAO,CAAC;yBACd,CAAC,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,aAAa,MAAM,CAAC,YAAY,CAAC,CAAC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa;oBACpG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvG,IAAI,OAAuD,CAAC;gBAC5D,IAAI,CAAC;oBAAC,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;gBAAC,CAAC;gBAChF,OAAO,KAAK,EAAE,CAAC;oBAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAChD,OAAO,UAAU,CAAC,OAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC1E,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE;gBAAE,OAAO,GAAG,CAAC;YAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;gBAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;oBAAE,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;gBAClE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACjF,CAAC;YACD,4EAA4E;YAC5E,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAY,EAAE,KAAa;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACpE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAC7G,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/flow-tool-manifest.d.ts

@@ -0,0 +1,30 @@
+import { FLOW_TOOL_SCHEMA_DIALECT } from './flow-tool-schema.js';
+import type { FlowToolJson, FlowToolObjectSchema } from './flow-tool-schema.js';
+export type FlowToolDigest = `sha256:${string}`;
+export interface FlowToolDeclarationV1 {
+    readonly name: string;
+    readonly description: string;
+    /** Author-supplied immutable bundle reference; not proof of bundle verification. */
+    readonly flow: Readonly<{
+        name: string;
+        version: string;
+        digest: FlowToolDigest;
+    }>;
+    readonly inputSchema: FlowToolObjectSchema;
+    readonly resultSchema: FlowToolObjectSchema;
+}
+export interface FlowToolManifestV1 extends FlowToolDeclarationV1 {
+    readonly manifestVersion: 1;
+    readonly schemaDialect: typeof FLOW_TOOL_SCHEMA_DIALECT;
+    /** SHA-256 of canonical manifest content excluding this field. Not a signature. */
+    readonly digest: FlowToolDigest;
+}
+/** Explicit runtime contract; TypeScript generics are never treated as schemas. */
+export declare function createFlowToolManifest(value: FlowToolDeclarationV1): FlowToolManifestV1;
+/** Verify untrusted JSON and optionally bind it to a caller-trusted catalog digest. */
+export declare function parseFlowToolManifest(value: unknown, expectedDigest?: FlowToolDigest): FlowToolManifestV1;
+export declare function canonicalFlowToolManifest(value: FlowToolManifestV1): string;
+export declare function validateFlowToolInput(manifest: FlowToolManifestV1, input: unknown): Readonly<Record<string, FlowToolJson>>;
+/** Validates structure only, not business truth or successful execution. */
+export declare function validateFlowToolResult(manifest: FlowToolManifestV1, result: unknown): Readonly<Record<string, FlowToolJson>>;
+//# sourceMappingURL=flow-tool-manifest.d.ts.map

package/dist/flow-tool-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-tool-manifest.d.ts","sourceRoot":"","sources":["../src/flow-tool-manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,wBAAwB,EAAyC,MAAM,uBAAuB,CAAC;AAC1H,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,MAAM,cAAc,GAAG,UAAU,MAAM,EAAE,CAAC;AAChD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IACnF,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC7C;AACD,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,OAAO,wBAAwB,CAAC;IACxD,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAwCD,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,kBAAkB,CAIvF;AAED,uFAAuF;AACvF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,cAAc,GAAG,kBAAkB,CAYzG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAE3E;AAYD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAE1H;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAE5H"}